MEDIUM6.5CVE-2026-23557EPSS 0.01%Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering.
MEDIUM5.4LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files.
MEDIUM4.3EPSS 0.03%PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array
MEDIUM6.5EPSS 0.08%PostgreSQL discloses MD5-hashed passwords via covert timing channel
MEDIUM4.3EPSS 0.03%PostgreSQL timeofday() can disclose portions of server memory
MEDIUM5.4EPSS 0.03%PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
MEDIUM6.5EPSS 0.07%NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
MEDIUM5.3EPSS 0.08%Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then changing the prox…
MEDIUM5.3When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server cert…
MEDIUM5.3EPSS 0.02%When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first hos…
MEDIUM5.9EPSS 0.03%curl might erroneously pass on credentials for a first proxy to a second proxy.
MEDIUM6.5EPSS 0.04%libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenti…
MEDIUM5.9EPSS 0.01%A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool.
MEDIUM5.3EPSS 0.03%An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 c…
MEDIUM5.3EPSS 0.07%A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via…
MEDIUM6.5EPSS 0.06%Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP…
MEDIUM6.5EPSS 0.06%Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.
MEDIUM5.5EPSS 0.00%Vim is an open source, command line text editor.
MEDIUM5.3EPSS 0.07%Vim is an open source, command line text editor.
MEDIUM4.4EPSS 0.23%Vim is an open source, command line text editor.
MEDIUM6.5EPSS 0.26%Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line